Files
wpscan/doc
Christian Mehlmauer 1afe12657f docs
2013-01-27 01:16:44 +01:00
..
2012-12-07 20:18:02 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2012-11-26 22:36:34 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-27 01:16:44 +01:00
2013-01-19 21:42:44 +01:00

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!DOCTYPE html>

<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">

<title>README - RDoc Documentation</title>

<link type="text/css" media="screen" href="./rdoc.css" rel="stylesheet">

<script type="text/javascript">
  var rdoc_rel_prefix = "./";
</script>

<script type="text/javascript" charset="utf-8" src="./js/jquery.js"></script>
<script type="text/javascript" charset="utf-8" src="./js/navigation.js"></script>
<script type="text/javascript" charset="utf-8" src="./js/search_index.js"></script>
<script type="text/javascript" charset="utf-8" src="./js/search.js"></script>
<script type="text/javascript" charset="utf-8" src="./js/searcher.js"></script>
<script type="text/javascript" charset="utf-8" src="./js/darkfish.js"></script>


<body class="file">
<nav id="metadata">
  <nav id="home-section" class="section">
  <h3 class="section-header">
    <a href="./index.html">Home</a>
    <a href="./table_of_contents.html#classes">Classes</a>
    <a href="./table_of_contents.html#methods">Methods</a>
  </h3>
</nav>


  <nav id="search-section" class="section project-section" class="initially-hidden">
  <form action="#" method="get" accept-charset="utf-8">
    <h3 class="section-header">
      <input type="text" name="search" placeholder="Search" id="search-field"
             title="Type to search, Up and Down to navigate, Enter to load">
    </h3>
  </form>

  <ul id="search-results" class="initially-hidden"></ul>
</nav>


  <div id="project-metadata">
    <nav id="fileindex-section" class="section project-section">
  <h3 class="section-header">Pages</h3>

  <ul>
  
    <li class="file"><a href="./CREDITS.html">CREDITS</a>
  
    <li class="file"><a href="./Gemfile.html">Gemfile</a>
  
    <li class="file"><a href="./README.html">README</a>
  
    <li class="file"><a href="./log_txt.html">log</a>
  
  </ul>
</nav>

    <nav id="classindex-section" class="section project-section">
  <h3 class="section-header">Class and Module Index</h3>

  <ul class="link-list">
  
    <li><a href="./Array.html">Array</a>
  
    <li><a href="./Browser.html">Browser</a>
  
    <li><a href="./BruteForce.html">BruteForce</a>
  
    <li><a href="./CacheFileStore.html">CacheFileStore</a>
  
    <li><a href="./CheckerPlugin.html">CheckerPlugin</a>
  
    <li><a href="./CustomOptionParser.html">CustomOptionParser</a>
  
    <li><a href="./GenerateList.html">GenerateList</a>
  
    <li><a href="./GitUpdater.html">GitUpdater</a>
  
    <li><a href="./ListGeneratorPlugin.html">ListGeneratorPlugin</a>
  
    <li><a href="./Malwares.html">Malwares</a>
  
    <li><a href="./Object.html">Object</a>
  
    <li><a href="./Plugin.html">Plugin</a>
  
    <li><a href="./Plugins.html">Plugins</a>
  
    <li><a href="./SvnParser.html">SvnParser</a>
  
    <li><a href="./SvnUpdater.html">SvnUpdater</a>
  
    <li><a href="./URI.html">URI</a>
  
    <li><a href="./Updater.html">Updater</a>
  
    <li><a href="./UpdaterFactory.html">UpdaterFactory</a>
  
    <li><a href="./Vulnerable.html">Vulnerable</a>
  
    <li><a href="./WebSite.html">WebSite</a>
  
    <li><a href="./WpConfigBackup.html">WpConfigBackup</a>
  
    <li><a href="./WpDetector.html">WpDetector</a>
  
    <li><a href="./WpEnumerator.html">WpEnumerator</a>
  
    <li><a href="./WpFullPathDisclosure.html">WpFullPathDisclosure</a>
  
    <li><a href="./WpItem.html">WpItem</a>
  
    <li><a href="./WpLoginProtection.html">WpLoginProtection</a>
  
    <li><a href="./WpOptions.html">WpOptions</a>
  
    <li><a href="./WpPlugin.html">WpPlugin</a>
  
    <li><a href="./WpPlugins.html">WpPlugins</a>
  
    <li><a href="./WpReadme.html">WpReadme</a>
  
    <li><a href="./WpTarget.html">WpTarget</a>
  
    <li><a href="./WpTheme.html">WpTheme</a>
  
    <li><a href="./WpThemes.html">WpThemes</a>
  
    <li><a href="./WpTimthumbs.html">WpTimthumbs</a>
  
    <li><a href="./WpUser.html">WpUser</a>
  
    <li><a href="./WpUsernames.html">WpUsernames</a>
  
    <li><a href="./WpVersion.html">WpVersion</a>
  
    <li><a href="./WpVulnerability.html">WpVulnerability</a>
  
    <li><a href="./WpscanOptions.html">WpscanOptions</a>
  
  </ul>
</nav>

  </div>
</nav>

<div id="documentation" class="description">
  
<p><em>__</em></p>

<pre>__          _______   _____
\ \        / /  __ \ / ____|
 \ \  /\  / /| |__) | (___   ___  __ _ _ __
  \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \
   \  /\  /  | |     ____) | (__| (_| | | | |
    \/  \/   |_|    |_____/ \___|\__,_|_| |_|</pre>

<p><em>__</em></p>

<h2 id="label-LICENSE%3D%3D">LICENSE==</h2>

<p>WPScan - WordPress Security Scanner Copyright (C) 2011-2013 The WPScan Team</p>

<p>This program is free software: you can redistribute it and/or modify it
under the terms of the GNU General Public License as published by the Free
Software Foundation, either version 3 of the License, or (at your option)
any later version.</p>

<p>This program is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
more details.</p>

<p>You should have received a copy of the GNU General Public License along
with this program.  If not, see &lt;<a
href="http://www.gnu.org/licenses/">www.gnu.org/licenses/</a>&gt;.</p>

<p>ryandewhurst at gmail</p>

<h2 id="label-INSTALL%3D%3D">INSTALL==</h2>

<pre class="ruby"><span class="ruby-constant">WPScan</span> <span class="ruby-identifier">comes</span> <span class="ruby-identifier">pre</span><span class="ruby-operator">-</span><span class="ruby-identifier">installed</span> <span class="ruby-identifier">on</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">following</span> <span class="ruby-constant">Linux</span> <span class="ruby-identifier">distributions</span><span class="ruby-operator">:</span>

 * <span class="ruby-constant">BackBox</span> <span class="ruby-constant">Linux</span>
 * <span class="ruby-constant">BackTrack</span> <span class="ruby-constant">Linux</span> (<span class="ruby-identifier">outdated</span> <span class="ruby-constant">WPScan</span> <span class="ruby-identifier">installed</span>, <span class="ruby-identifier">update</span> <span class="ruby-identifier">needed</span>)
 * <span class="ruby-constant">Pentoo</span>
 * <span class="ruby-constant">SamuraiWTF</span>

<span class="ruby-constant">Prerequisites</span><span class="ruby-operator">:</span>

 * <span class="ruby-constant">Windows</span> <span class="ruby-keyword">not</span> <span class="ruby-identifier">supported</span>
 * <span class="ruby-constant">Ruby</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">1.9</span>
 * <span class="ruby-constant">RubyGems</span>
 * <span class="ruby-constant">Git</span>

<span class="ruby-operator">-</span><span class="ruby-operator">&gt;</span> <span class="ruby-constant">Installing</span> <span class="ruby-identifier">on</span> <span class="ruby-constant">Debian</span><span class="ruby-operator">/</span><span class="ruby-constant">Ubuntu</span><span class="ruby-operator">:</span>

  <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">apt</span><span class="ruby-operator">-</span><span class="ruby-identifier">get</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">libcurl4</span><span class="ruby-operator">-</span><span class="ruby-identifier">gnutls</span><span class="ruby-operator">-</span><span class="ruby-identifier">dev</span> <span class="ruby-identifier">libopenssl</span><span class="ruby-operator">-</span><span class="ruby-identifier">ruby</span> <span class="ruby-identifier">libxml2</span> <span class="ruby-identifier">libxml2</span><span class="ruby-operator">-</span><span class="ruby-identifier">dev</span> <span class="ruby-identifier">libxslt1</span><span class="ruby-operator">-</span><span class="ruby-identifier">dev</span> <span class="ruby-identifier">ruby</span><span class="ruby-operator">-</span><span class="ruby-identifier">dev</span>
  <span class="ruby-identifier">git</span> <span class="ruby-identifier">clone</span> <span class="ruby-identifier">https</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rgithub.com/</span><span class="ruby-identifier">wpscanteam</span><span class="ruby-operator">/</span><span class="ruby-identifier">wpscan</span>.<span class="ruby-identifier">git</span>
  <span class="ruby-identifier">cd</span> <span class="ruby-identifier">wpscan</span>
  <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">gem</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">bundler</span> <span class="ruby-operator">&amp;&amp;</span> <span class="ruby-identifier">bundle</span> <span class="ruby-identifier">install</span> <span class="ruby-operator">-</span><span class="ruby-operator">-</span><span class="ruby-identifier">without</span> <span class="ruby-identifier">test</span> <span class="ruby-identifier">development</span>

<span class="ruby-operator">-</span><span class="ruby-operator">&gt;</span> <span class="ruby-constant">Installing</span> <span class="ruby-identifier">on</span> <span class="ruby-constant">Fedora</span><span class="ruby-operator">:</span>

  <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">yum</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">libcurl</span><span class="ruby-operator">-</span><span class="ruby-identifier">devel</span>
  <span class="ruby-identifier">git</span> <span class="ruby-identifier">clone</span> <span class="ruby-identifier">https</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rgithub.com/</span><span class="ruby-identifier">wpscanteam</span><span class="ruby-operator">/</span><span class="ruby-identifier">wpscan</span>.<span class="ruby-identifier">git</span>
  <span class="ruby-identifier">cd</span> <span class="ruby-identifier">wpscan</span>
  <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">gem</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">bundler</span> <span class="ruby-operator">&amp;&amp;</span> <span class="ruby-identifier">bundle</span> <span class="ruby-identifier">install</span> <span class="ruby-operator">-</span><span class="ruby-operator">-</span><span class="ruby-identifier">without</span> <span class="ruby-identifier">test</span> <span class="ruby-identifier">development</span>

<span class="ruby-operator">-</span><span class="ruby-operator">&gt;</span> <span class="ruby-constant">Installing</span> <span class="ruby-identifier">on</span> <span class="ruby-constant">Archlinux</span><span class="ruby-operator">:</span>

  <span class="ruby-identifier">pacman</span> <span class="ruby-operator">-</span><span class="ruby-constant">Sy</span> <span class="ruby-identifier">ruby</span>
  <span class="ruby-identifier">pacman</span> <span class="ruby-operator">-</span><span class="ruby-constant">Sy</span> <span class="ruby-identifier">libyaml</span>

  <span class="ruby-identifier">git</span> <span class="ruby-identifier">clone</span> <span class="ruby-identifier">https</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rgithub.com/</span><span class="ruby-identifier">wpscanteam</span><span class="ruby-operator">/</span><span class="ruby-identifier">wpscan</span>.<span class="ruby-identifier">git</span>
  <span class="ruby-identifier">cd</span> <span class="ruby-identifier">wpscan</span>
  <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">gem</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">bundler</span> <span class="ruby-operator">&amp;&amp;</span> <span class="ruby-identifier">bundle</span> <span class="ruby-identifier">install</span> <span class="ruby-operator">-</span><span class="ruby-operator">-</span><span class="ruby-identifier">without</span> <span class="ruby-identifier">test</span> <span class="ruby-identifier">development</span>

  <span class="ruby-identifier">gem</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">typhoeus</span>
  <span class="ruby-identifier">gem</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">nokogiri</span>

<span class="ruby-operator">-</span><span class="ruby-operator">&gt;</span> <span class="ruby-constant">Installing</span> <span class="ruby-identifier">on</span> <span class="ruby-constant">Mac</span> <span class="ruby-constant">OS</span> <span class="ruby-constant">X</span><span class="ruby-operator">:</span>

  <span class="ruby-identifier">git</span> <span class="ruby-identifier">clone</span> <span class="ruby-identifier">https</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rgithub.com/</span><span class="ruby-identifier">wpscanteam</span><span class="ruby-operator">/</span><span class="ruby-identifier">wpscan</span>.<span class="ruby-identifier">git</span>
  <span class="ruby-identifier">cd</span> <span class="ruby-identifier">wpscan</span>
  <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">gem</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">bundler</span> <span class="ruby-operator">&amp;&amp;</span> <span class="ruby-identifier">bundle</span> <span class="ruby-identifier">install</span> <span class="ruby-operator">-</span><span class="ruby-operator">-</span><span class="ruby-identifier">without</span> <span class="ruby-identifier">test</span> <span class="ruby-identifier">development</span>
</pre>

<h2 id="label-KNOWN+ISSUES%3D%3D">KNOWN ISSUES==</h2>

<pre class="ruby"><span class="ruby-operator">-</span> <span class="ruby-constant">Typhoeus</span> <span class="ruby-identifier">segmentation</span> <span class="ruby-identifier">fault</span><span class="ruby-operator">:</span>
    <span class="ruby-constant">Update</span> <span class="ruby-identifier">cURL</span> <span class="ruby-identifier">to</span> <span class="ruby-identifier">version</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">7.21</span> (<span class="ruby-identifier">may</span> <span class="ruby-identifier">have</span> <span class="ruby-identifier">to</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">from</span> <span class="ruby-identifier">source</span>)
    <span class="ruby-constant">See</span> <span class="ruby-identifier">http</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rcode.google.com/</span><span class="ruby-identifier">p</span><span class="ruby-operator">/</span><span class="ruby-identifier">wpscan</span><span class="ruby-operator">/</span><span class="ruby-identifier">issues</span><span class="ruby-operator">/</span><span class="ruby-identifier">detail?</span><span class="ruby-identifier">id</span>=<span class="ruby-value">81</span>

<span class="ruby-operator">-</span> <span class="ruby-constant">Proxy</span> <span class="ruby-keyword">not</span> <span class="ruby-identifier">working</span><span class="ruby-operator">:</span>
    <span class="ruby-constant">Update</span> <span class="ruby-identifier">cURL</span> <span class="ruby-identifier">to</span> <span class="ruby-identifier">version</span> =<span class="ruby-operator">&gt;</span> <span class="ruby-value">7.21</span><span class="ruby-value">.7</span> (<span class="ruby-identifier">may</span> <span class="ruby-identifier">have</span> <span class="ruby-identifier">to</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">from</span> <span class="ruby-identifier">source</span>).

    <span class="ruby-constant">Installation</span> <span class="ruby-identifier">from</span> <span class="ruby-identifier">sources</span> <span class="ruby-operator">:</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Grab</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">sources</span> <span class="ruby-identifier">from</span> <span class="ruby-identifier">http</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rcurl.haxx.se/</span><span class="ruby-identifier">download</span>.<span class="ruby-identifier">html</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Decompress</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">archive</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Open</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">folder</span> <span class="ruby-identifier">with</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">extracted</span> <span class="ruby-identifier">files</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Run</span> .<span class="ruby-operator">/</span><span class="ruby-identifier">configure</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Run</span> <span class="ruby-identifier">make</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Run</span> <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">make</span> <span class="ruby-identifier">install</span>
      <span class="ruby-operator">-</span> <span class="ruby-constant">Run</span> <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">ldconfig</span>

<span class="ruby-operator">-</span> <span class="ruby-identifier">cannot</span> <span class="ruby-identifier">load</span> <span class="ruby-identifier">such</span> <span class="ruby-identifier">file</span> <span class="ruby-operator">-</span><span class="ruby-operator">-</span> <span class="ruby-identifier">readline</span><span class="ruby-operator">:</span>
    <span class="ruby-constant">Run</span> <span class="ruby-identifier">sudo</span> <span class="ruby-identifier">aptitude</span> <span class="ruby-identifier">install</span> <span class="ruby-identifier">libreadline5</span><span class="ruby-operator">-</span><span class="ruby-identifier">dev</span> <span class="ruby-identifier">libncurses5</span><span class="ruby-operator">-</span><span class="ruby-identifier">dev</span>

    <span class="ruby-constant">Then</span>, <span class="ruby-identifier">open</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">directory</span> <span class="ruby-identifier">of</span> <span class="ruby-identifier">the</span> <span class="ruby-identifier">readline</span> <span class="ruby-identifier">gem</span> (<span class="ruby-identifier">you</span> <span class="ruby-identifier">have</span> <span class="ruby-identifier">to</span> <span class="ruby-identifier">locate</span> <span class="ruby-identifier">it</span>)

    <span class="ruby-identifier">cd</span> <span class="ruby-operator">~</span><span class="ruby-regexp">%r.rvm/</span><span class="ruby-identifier">rc</span><span class="ruby-operator">/</span><span class="ruby-identifier">ruby</span><span class="ruby-operator">-</span><span class="ruby-value">1.9</span><span class="ruby-value">.2</span><span class="ruby-operator">-</span><span class="ruby-identifier">p180</span><span class="ruby-operator">/</span><span class="ruby-identifier">ext</span><span class="ruby-operator">/</span><span class="ruby-identifier">readline</span>
    <span class="ruby-identifier">ruby</span> <span class="ruby-identifier">extconf</span>.<span class="ruby-identifier">rb</span>
    <span class="ruby-identifier">make</span>
    <span class="ruby-identifier">make</span> <span class="ruby-identifier">install</span>

    <span class="ruby-constant">See</span> <span class="ruby-identifier">http</span>:<span class="ruby-operator">/</span><span class="ruby-regexp">%rvvv.tobiassjosten.net/</span><span class="ruby-identifier">ruby</span><span class="ruby-operator">-</span><span class="ruby-identifier">on</span><span class="ruby-operator">-</span><span class="ruby-identifier">rails</span><span class="ruby-operator">/</span><span class="ruby-identifier">fixing</span><span class="ruby-operator">-</span><span class="ruby-identifier">readline</span><span class="ruby-operator">-</span><span class="ruby-keyword">for</span><span class="ruby-operator">-</span><span class="ruby-identifier">the</span><span class="ruby-operator">-</span><span class="ruby-identifier">ruby</span><span class="ruby-operator">-</span><span class="ruby-identifier">on</span><span class="ruby-operator">-</span><span class="ruby-identifier">rails</span><span class="ruby-operator">-</span><span class="ruby-identifier">console</span><span class="ruby-operator">/</span> <span class="ruby-keyword">for</span> <span class="ruby-identifier">more</span> <span class="ruby-identifier">details</span>
</pre>

<h2 id="label-WPSCAN+ARGUMENTS%3D%3D">WPSCAN ARGUMENTS==</h2>

<p>update   Update to the latest revision</p>

<p>url   | -u &lt;target url&gt;  The WordPress URL/domain to scan.</p>

<p>force | -f Forces WPScan to not check if the remote site is running
WordPress.</p>

<p>enumerate | -e [option(s)]  Enumeration.</p>

<pre>option :
  u        usernames from id 1 to 10
  u[10-20] usernames from id 10 to 20 (you must write [] chars)
  p        plugins
  vp       only vulnerable plugins
  ap       all plugins (can take a long time)
  tt       timthumbs
  t        themes
  vp       only vulnerable themes
  at       all themes (can take a long time)
Multiple values are allowed : '-e tt,p' will enumerate timthumbs and plugins
If no option is supplied, the default is 'vt,tt,u,vp'</pre>

<p>exclude-content-based &lt;regexp or string&gt;  Used with the
enumeration option, will exclude all occurence based on the regexp or
string supplied</p>

<pre>You do not need to provide the regexp delimiters, but you must write the quotes (simple or double)</pre>

<p>config-file | -c &lt;config file&gt; Use the specified config file</p>

<p>follow-redirection  If the target url has a redirection, it will be
followed without asking if you wanted to do so or not</p>

<p>wp-content-dir &lt;wp content dir&gt;  WPScan try to find the content
directory (ie wp-content) by scanning the index page, however you can
specified it. Subdirectories are allowed</p>

<p>wp-plugins-dir &lt;wp plugins dir&gt;  Same thing than wp-content-dir but
for the plugins directory. If not supplied, WPScan will use
wp-content-dir/plugins. Subdirectories are allowed</p>

<p>proxy &lt;[protocol://]host:port&gt;  Supply a proxy (will override the
one from conf/browser.conf.json).</p>

<pre>HTTP, SOCKS4 SOCKS4A and SOCKS5 are supported. If no protocol is given (format host:port), HTTP will be used</pre>

<p>proxy-auth &lt;username:password&gt;  Supply the proxy login credentials
(will override the one from conf/browser.conf.json).</p>

<p>basic-auth &lt;username:password&gt;  Set the HTTP Basic authentification</p>

<p>wordlist | -w &lt;wordlist&gt;  Supply a wordlist for the password bruter
and do the brute.</p>

<p>threads  | -t &lt;number of threads&gt;  The number of threads to use when
multi-threading requests. (will override the value from
conf/browser.conf.json)</p>

<p>username | -U &lt;username&gt;  Only brute force the supplied username.</p>

<p>help     | -h This help screen.</p>

<p>verbose  | -v Verbose output.</p>

<h2 id="label-WPSCAN+EXAMPLES%3D%3D">WPSCAN EXAMPLES==</h2>

<p>Do non-intrusive checks…</p>

<pre>ruby wpscan.rb --url www.example.com</pre>

<p>Do wordlist password brute force on enumerated users using 50 threads…</p>

<pre>ruby wpscan.rb --url www.example.com --wordlist darkc0de.lst --threads 50</pre>

<p>Do wordlist password brute force on the admin username only…</p>

<pre>ruby wpscan.rb --url www.example.com --wordlist darkc0de.lst --username admin</pre>

<p>Enumerate instaled plugins…</p>

<pre>ruby wpscan.rb --url www.example.com --enumerate p</pre>

<h2 id="label-WPSTOOLS+ARGUMENTS%3D%3D">WPSTOOLS ARGUMENTS==</h2>

<p>help    | -h   This help screen. Verbose | -v   Verbose output. update 
| -u   Update to the latest revision. generate_plugin_list [number of
pages]  Generate a new data/plugins.txt file. (supply number of
<strong>pages</strong> to parse, default : 150) gpl  Alias for
generate_plugin_list check-local-vulnerable-files | clvf &lt;local
directory&gt;  Perform a recursive scan in the &lt;local directory&gt; to
find vulnerable files or shells</p>

<h2 id="label-WPSTOOLS+EXAMPLES%3D%3D">WPSTOOLS EXAMPLES==</h2>
<ul><li>
<p>Generate a new most popular plugin list, up to 150 pages …</p>
</li></ul>

<p>ruby wpstools.rb generate_plugin_list 150</p>
<ul><li>
<p>Locally scan a wordpress installation for vulnerable files or shells :</p>
</li></ul>

<p>ruby wpstools.rb check-local-vulnerable-files /var/www/wordpress/</p>

<h3 id="label-PROJECT+HOME%3D%3D%3D">PROJECT HOME===</h3>

<p><a href="http://www.wpscan.org">www.wpscan.org</a></p>

<h3 id="label-REPOSITORY%3D%3D%3D">REPOSITORY===</h3>

<p><a
href="https://github.com/wpscanteam/wpscan">github.com/wpscanteam/wpscan</a></p>

<h3 id="label-ISSUES%3D%3D%3D">ISSUES===</h3>

<p><a
href="https://github.com/wpscanteam/wpscan/issues">github.com/wpscanteam/wpscan/issues</a></p>

<h3 id="label-SPONSOR%3D%3D%3D">SPONSOR===</h3>

<p>WPScan is sponsored by the RandomStorm Open Source Initiative.</p>

<p>Visit RandomStorm at <a
href="http://www.randomstorm.com">www.randomstorm.com</a></p>

</div>



<footer id="validator-badges">
  <p><a href="http://validator.w3.org/check/referer">[Validate]</a>
  <p>Generated by <a href="https://github.com/rdoc/rdoc">RDoc</a> 3.12.
  <p>Generated with the <a href="http://deveiate.org/projects/Darkfish-Rdoc/">Darkfish Rdoc Generator</a> 3.
</footer>